Ready-to-defraud turnkey services from Russia's Impulse Team are offered on the cyber underground and have built a campaign that has operated undetected dating back to 2016.
theregister.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from theregister.com Daily Mail and Mail on Sunday newspapers.
Despite a federal order mandating that civilian agencies identify and patch all known instances of the vulnerability, experts say the disclosure of a federal agency compromised through Log4J almost a year later underscores how the deeply embedded nature of the software bug will continue to facilitate intrusions for years to come.